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Top Stories 

• Southbound lanes of Highway 48 in Montgomery County, Tennessee reopened July 20 
after being closed for about 7 hours after a semi-truck hauling 26,000 pounds of cement 
overturned and spilled fuel onto the highway. - Newschannel5.com (See item 9 ) 

• Microsoft released an update addressing a critical remote code execution vulnerability with 
the OpenType Font Driver in the Windows Adobe Type Manager Library that was being 
exploited in the wild. - Network World (See item 22 ) 

• Findings from a survey of over 600 critical infrastructure information technology 
professionals revealed that about half of all respondents believe an attack on critical 
infrastructure in the next 3 years will down systems. - SC Magazine (See item 23 ) 

• Thousands of BendBroadband customers were without Internet, TV, and phone services for 
almost 10 hours July 20 after an accident in Bend, Oregon damaged a fiber-optic data line. 

- KTVZ 21 Bend (See item 24) 
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Energy Sector 



1. July 21, WABC 7 New York - (New York) Crews working to restore power to 
thousands on Staten Island, Long Island. Over 19,000 outages were reported July 20 
across New York City due to electrical load issues amid high temperatures, and 
138,000 customers had their power reduced while utility crews worked to restore 
service. Staten Island Tech and New Dorp High School were established as cooling 
centers to provide relief from the heat. 

Source: http://7online.eom/news/20000-t-- without-power-in-region;-brooklyn-queens- 
manhattan-residents-asked-to-conserve-energy/866071/ 

2. July 20, KEYT 3 Santa Barbara - (California) Gas line and oil pipeline rupture in 
Cuyama Valley. Approximately 210 gallons of oil spilled at the Russell Ranch oil field 
in Cuyama Valley, California July 20 after a 3-inch gas line and 4-inch oil pipeline 
ruptured. The cause of the rupture remains under investigation. 

Source: http://www.kevt.com/news/gas-line-and-oil-pipeline-rupture-in-cuvama- 
valley/34257218 



For another story, see item 10 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

3. July 20, KMTV 3 Omaha - (Nebraska) Ft. Calhoun nuclear plant goes offline. The 
Omaha Public Power District reported that Fort Calhoun nuclear power plant was shut 
down July 20 while crews repaired a water leak on one of the plant’s four reactor 
coolant pumps. No service interruptions will occur to customers while repairs are 
ongoing. 

Source: http://www.scrippsmedia.com/krntv/news/Ft-Calhoun-nuclear-plant-goes- 
offline-317664141.html 



Critical Manufacturing Sector 

4. July 21, Network World - (National) Car hackers urge you to patch your Chrysler, 
Ram, Durango, or Jeep. Fiat Chrysler Automobiles released a manual service bulletin 
July 16 for various model year 2013 and 2014 Ram, Cherokee, Grand Cherokee, 
Durango, and Viper vehicles running Uconnect systems addressing vulnerabilities that 
could have allowed unauthorized and unlawful access to vehicle systems. 

Source: http://www.networkworld.com/article/2950642/microsoft-subnet/car-hackers- 
urge-vou-to-patch-vour-chrvsler-ram-durango-or-ieep.html#tk.rss all 

5. July 21, U.S. Consumer Product Safety Commission - (National) Target recalls Circo 
night lights due to fire hazard. Circo issued a recall July 21 for about 143,000 various 
battery-operated night light models due to an issue in which the night light could 
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overheat and melt, posing a fire hazard. The product was sold exclusively at Target 
stores nationwide. 

Source: http://www.cpsc.gov/en/Recalls/2015/Target-Recalls-Circo-Night- 
Lights/?utm source=feedly&utm medium=rss&utm campaign=Recalls+RSS 

6. July 20, U.S. Department of Labor - (Connecticut) Employees of New Britain, Conn., 
heat treatment plant face chemical, fire, explosion and mechanical hazards. The 

Occupational Safety and Health Administration issued New Britain-based 
Metallurgical Processing Inc., July 20 with 24 serious citations for violations including 
failing to train and properly equip employees who perform live electrical work, a lack 
of a pressure relief valve on a nitrogen tank, and improper storage of chemicals and 
combustible materials, among other issues. Proposed penalties total $77,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28299 



Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

7. July 20, Bay News 13 Orlando - (Florida) Skimming devices found at 3 ATM 
machines in Seminole. Seminole County authorities reported that ATM skimming 
devices were installed at three locations in early July, and an investigation is ongoing to 
locate suspects. 

Source: 

http://www.mynewsl3.com/content/news/cfnewsl3/news/article.html/content/news/arti 
cles/cfn/20 15/7/20/skimming devices fou.html 

Transportation Systems Sector 

8. July 21, KCNC 4 Denver - (Colorado) All highways open after gas line break in 
Castle Rock. A gas line break has shut down several highways in Castle Rock 
including State Highway 86 west of Interstate 25 and U.S. 85 east for an unspecified 
amount of time July 21. 

Source: http://denver.cbslocal.com/2015/07/21/gas-line-shuts-down-several-highways- 
in-castle-rock/ 

9. July 20, Newschannel5.com - (Tennessee) Highway 48 reopens near Clarksville 
after semi-truck overturns. Southbound lanes of Highway 48 in Montgomery County 
reopened July 20 after being closed for approximately 7 hours after a semi-truck 
hauling 26,000 pounds of cement overturned and caused fuel to leak onto the highway. 
Crews responded to the scene and the driver was extracted from the vehicle with minor 
injuries. 

Source: http://www.scrippsmedia.com/newschannel5/news/Overturned-Semi-Truck- 
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Blocks-Highway- 149-Near-Clarksville-3 175 1 8261 .html 



10. July 20, WXIA 11 Atlanta - (Georgia) Tanker truck explosion causes Clayton 
Mountain fire. Highway 76 connecting Clayton and Hi was see reopened July 20 after 
being closed for approximately 6 hours while crews responded to a blaze near the 
bottom of Clayton Mountain after a semi-truck hauling 8,500 gallons of gas overturned 
and caught on fire. The driver survived with minor injuries. 

Source: http://www.llalive.com/storv/news/local/2015/07/20/tanker-explosion- 
wreck/30434123/ 

11. July 20, Corsicana Daly Sun - (Texas) Three dead in 1-45 crash. Interstate 45 near 
mile maker 209 south of Navarro County was shut down for several hours July 20 
while crews investigated and worked to clear the scene of a 2-vehicle head-on collision 
that killed 3 people and injured several others. 

Source: http://www.corsicanadailysun.com/news/update-three-dead-in-i— 
crash/artide b6e08d52-2 f 1 3- J 1 e5-b792-bfe4e4d5e7d0.html 

12. July 20, KREM 2 Spokane - (Washington) State fire help requested for 1-90 fire near 
George. All lanes of Interstate 90 in George were shut down between milepost 138 and 
154 July 20 while State fire assistance worked to contain a 900-acre fire that caused a 
Level 3 evacuation to be implemented for multiple recreational areas along the river. 

No homes or buildings have been destroyed. 

Source: http://www.krem.com/storv/news/local/wildfire/2015/07/20/i-90-shut-down- 
again-near-vantage-due-to-brush-fire/30430779/ 

For another story, see item 24 

Food and Agriculture Sector 

13. July 20, U.S. Food and Drug Administration - (National) Barrel O’ Fun Snack Foods 
Co. issues allergy alert on undeclared milk in Vic’s original popcorn (l-l/8oz). The 
U.S. Food and Drug Administration reported July 20 that Barrell O’ Fun Snack Foods 
Co. of Perham, Minnesota is recalling a specific lot of Vic’s Original Popcorn 1-1/8 
ounce-bags due to an undeclared milk allergen. The product was distributed through 
foodservices and retail stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm455468.htm 

14. July 20, U.S. Department of Agriculture - (National) Recall notification report 
(salad products). Huxtable’s Kitchen, Inc., a Fife, Washington establishment, issued a 
recall July 20 for approximately 778 pounds of salad products due to misbranding as 
the products may contain nitrites in the bacon. The products were shipped to stores 
nationwide. 

Source: http://www.fsis.usda.gov/wps/wcm/connect/FSIS- 
Content/intemet/main/topics/recalls-and-public-health-alert s/recall-case- 
archive/archive/20 1 5/rnr- 103-2015 

15. July 17, U.S. Department of Agriculture - (National) Recall notification report 102- 
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2015 (sausage products). The Sausage Factory Inc., a Carson City, Nevada 
establishment, is recalling approximately 5,960 pounds of sausage products due to 
misbranding July 16. The products were produced on various dates from March 30 - 
June 12 and shipped to retail locations nationwide. 

Source: http://www.fsis.usda.gov/wps/wcm/connect/FSIS- 
Content/internet/main/topics/recalls-and-public-health-alerts/recall-case- 
archi ve/archive/20 1 5/rnr- 102-2015 



Water and Wastewater Systems Sector 

16. July 20, Jacksonville Daily News - (North Carolina) Maysville officials: partially 
treated sewage spilled into river. About 15,000 gallons of partially treated sewage 
spilled into the White Oak River in Maysville over the weekend of July 18 due to a 
malfunction with one of the pumps that transfers wastewater at the town’s wastewater 
treatment plant. Officials ordered a precautionary water advisory for residents to avoid 
the use of the waterway for swimming and fishing until the town is notified of clear 
water samples. 

Source: http://www.idnews.com/article/20150720/NEWS/150729896 

Healthcare and Public Health Sector 

17. July 20, Easton Express-Times - (Pennsylvania) Lehigh Valley mental health clinics 
accused of fraud, unqualified psychotherapy. The U S. Attorney’s Office for the 
Eastern District of Pennsylvania filed a lawsuit against Lehigh Valley Community 
Mental Health Centers July 20 in response to allegations of Medicaid fraud. A total of 
nine clinics under the mental health system were accused of using unqualified stand-ins 
for psychiatrists and failing to meet the minimum time requirement for medication 
management visits. 

Source: 

http://www.lehighvallevlive.com/news/index.ssf/2015/07/lehigh valley mental health 
cl.html 



18. July 20, Chicago Tribune - (Indiana) Incident forces VA clinic evacuation. The 
Adam Benjamin Jr. Veterans Affairs Outpatient Clinic in Crown Point, Indiana was 
evacuated July 20 after an individual threw a suspicious package over the front desk 
and fled the scene. The package was determined to not be a threat, and the clinic will 
reopen July 21. 

Source: http://www.chicagotribune.com/suburbs/post-tribune/news/ct-ptb-va-clinic- 
police-st0721-20150720-story.html 

19. July 18, Florida Times-Union - (Georgia) Official at Augusta VA hospital indicted 
on 50 counts of ordering staff to falsify vets’ records. A supervisor at the Charlie 
Norwood VA Medical Center in Augusta, Georgia was charged with 50 counts of 
making false statements in an unsealed indictment July 17 after allegedly ordering staff 
members to fabricate medical records of veterans in need of outside care. 

Source: http://iacksonville.com/news/crime/2015-07-18/story/official-augusta-va- 
hospital-indicted-50-counts-ordering-staff-falsify 
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Government Facilities Sector 



20. July 20, Nextgov - (National) OPM changes privacy rules to let investigators inside 
all databases. The U.S. Office of Personnel Management announced July 16 updated 
privacy regulations for routine use, granting access for investigators to all its databases 
in the case of suspected or confirmed security breaches. The public has until August 17 
to comment on these changes in confidentiality. 

Source: http://www.nextgov.com/cvbersecuritv/2015/07/oprn-changes-privacy-rules- 
let-investigators-inside-all-databases/1 1 8105/ 

For another story, see item 24 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

21. July 21, Securityweek - (International) Configuration issue exposes 30,000 MongoDB 
instances: researcher. The founder of the Shodan computer search engine reported 
that a default listening configuration in MongoDB exposed about 30,000 database 
instances containing 592.2 terabytes (TB) of data. 

Source: http://www.securitvweek.com/configuration-issue-exposes-30000-mongodb- 
instances-researcher 

22. July 20, Network World - (International) Microsoft issues critical out-of -band patch 
for flaw affecting all Windows versions. Microsoft released an update addressing a 
critical remote code execution vulnerability (RCE) with the OpenType Font Driver in 
the Windows Adobe Type Manager Library affecting all supported versions of 
Windows that was being exploited in the wild. 

Source: http://www.networkworld.com/article/2949910/microsoft-subnet/microsoft- 
issues-critical-out-of-band-patch-for-flaw-affecting-all-windows- 
versions,html#tk.rss all 

23. July 20, SC Magazine - (International) Study: half of critical infrastructure IT 
professionals believe major attack looming. Findings from a survey of over 600 
critical infrastructure information technology (IT) professionals in Intel Security’s 
“Critical Infrastructure Readiness Report” revealed that about half of all respondents 
believe an attack on critical infrastructure in the next three years will down systems and 
lead to loss of life, and that 90 percent of respondents’ organizations faced an average 
of 20 attacks in the last year, among other statistics. 

Source: http://www.scmagazine.com/intel-securitv-conducts-cyberattack- 
survey/article/427429/ 



For additional stories, see items 4 and 20 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

24. July 20, KTVZ 21 Bend - (Oregon) Monday woes: Bend crash cuts Internet, TV to 
thousands. Thousands of BendBroadband customers were without Internet, TV and 
phone services for up to 10 hours July 20 after an accident in northeast Bend damaged 
a fiber-optic data line. Crews worked to repair the outage but numerous businesses and 
government customers were affected, including the Oregon Department of Motor 
Vehicles, which closed 4 Central Oregon offices due to the Internet outage. 

Source: http://www.ktvz.com/news/bend-crash-cuts-intemet-tv-to-thousands-repairs- 
underway/34255912 

Commercial Facilities Sector 

25. July 21, KLKN 8 Lincoln - (Nebraska) Lincoln apartment fire forces building 
evacuation. The Lodge Apartments in Lincoln, Nebraska was evacuated July 20 after a 
fire began inside an apartment unit and spread to surrounding areas. Fire crews 
extinguished the flames and damages total $100,000. 

Source: http://www.klkntv.com/storv/29592428/lincoln-apartment-fire-forces-building- 
evacuation 

26. July 20, WGCL 46 Atlanta - (Georgia) Gwinnet County gym evacuated because of 
chemical spill. An LA Fitness gym in Gwinnett County was evacuated July 20 after an 
accidental mix of chemicals occurred in the pool of the facility. Two people were 
injured and one was sent to an area hospital. 

Source: http://www.cbs46.com/story/29589798/gwinnett-county-gym-evacuated- 
because-of-chemical- spill 

27. July 20, Montgomery Advertiser - (Alabama) Threat prompts evacuation in 
Eastchase mall area. Montgomery Police reported that parts of Eastchase Shoppes 
were closed or evacuated July 20 after officials received reports of a bomb threat. 
Approximately 50 police officers and fire officials responded to the incident and found 
no explosive devices or suspicious packages. 

Source: http://www.montgomervadvertiser.com/storv/news/2015/07/20/bomb-threat— 
eastchase/30431659/ 

28. July 20, Salt Lake City Deseret News - (Utah) Carbon monoxide scare prompts 
evacuation of 24 Salt Lake apartments. Salt Lake City officials reported July 20 that 
24 units at the Village Apartments were evacuated after high carbon monoxide levels 
were found. No injuries were reported and an investigation is ongoing to determine the 
cause. 
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Source: http://www.deseretnews.com/article/865632956/Carbon-monoxide-scare- 
prompts-evacuation-of-24-Salt-Lake-apartments.html?pg=all 

29. July 19, Bay News 9 St. Petersburg - (Florida) Discovery of WWII-era flash bomb 
prompts evacuation on St. Pete Beach. A World War II-era flash bomb was found on 
St. Pete Beach July 19, prompting an evacuation of nearby homes and displacing 125 
residents. Bomb crews neutralized the device and no injuries were reported. 

Source: 

http://www.bavnews9.com/content/news/bavnews9/news/article.html/content/news/arti 
cles/bn9/2015/7/19/section of st pete b.html 

For another story, see item 24 

Dams Sector 



30. July 21, Associated Press - (Missouri) Dam leak closes park in St. Charles County. 
The Missouri Department of Natural Resources is responding to a leak in a dam that 
holds back water in a private lake near Camp Creek County Park in St. Charles County, 
while officials have closed the park as a precaution. 

Source: http://www.marvvilledailvforum.com/news/state news/article fd480580-7f53- 
5 5 a9-bc67-a82b5 64cf7be .html 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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